UpdateVulnerabilitySLAs

This method can be used for the following functionality: Update remediation SLAs on vulnerabilities.

Parameters

The following URL, Headers and Parameters are required for requests to this API endpoint. Where a parameter is optional, it will be indicated. Otherwise treat all parameters as mandatory.

Headers

PUT /api/ss/vulnerabilities/sla HTTP/1.1
Host: demo.attackforge.com
X-SSAPI-KEY: APIKey
Content-Type: application/json
Connection: close

Body

The body supplied must be a list of vulnerability objects:

{   
   "vulnerabilities": [
      {
         "id": "64b500641f57624e0d52063e"
      },
      {
         "id": "64883490fa64f021de7757b5"
      }
   ]
}

reapply (boolean) (optional)

Set to true to reapply the SLA rules against the vulnerability.

Example:

{   
   "vulnerabilities": [
      {
         "id": "64b500641f57624e0d52063e",
         "reapply": true
      }
   ]
}

delete (boolean) (optional)

Set to true to remove the SLA associated with the vulnerability.

Example:

{   
   "vulnerabilities": [
      {
         "id": "64b500641f57624e0d52063e",
         "delete": true
      }
   ]
}

sla (string) (optional)

Set to custom SLA date for the vulnerability. Must be UTC string e.g. 2021-06-03T23:15:33.008Z.

Example:

{   
   "vulnerabilities": [
      {
         "id": "64b500641f57624e0d52063e",
         "sla": "2021-06-03T23:15:33.008Z"
      }
   ]
}

Example

The following example is a cURL request to update the SLA for a vulnerability.

Request

Include API Token instead of stars in 'X-SSAPI-KEY: ***************************************' parameter.

curl -X PUT 'https://demo.attackforge.com/api/ss/vulnerabilities/sla' -H 'Host: demo.attackforge.com' -H 'X-SSAPI-KEY: ***************************************' -H 'Content-Type: application/json' -H 'Connection: close' -d '{
   "vulnerabilities": [    
      {
         "id": "64b500641f57624e0d52063e",
         "reapply": true
      }
   ]
}'

Response

Response contains a status and list of all successful and failed vulnerabilities.

{
   status: "ok", 
   succeeded: [
      "..."
   ], 
   failed: [
      "..."
   ]
}